Use the command:
composer global update
List updates
Use Composer's built-in command for listing packages that have updates available:
composer outdated "drupal/*"
You can get the same information with the Composer's show command.
List security updates
The security status from Drupal.org isn't available through Composer. Luckily Drush comes to the rescue: drush pm:security Install updates For a given Drupal module/project use composer update drupal/modulename --with-dependencies Finally, run any database updates, rebuild the cache and export the potentially changed configurations, reviewing the changes via --diff: drush updatedb drush cache:rebuild drush config:export --diff